Adds the Code Agent -> Skill CLI -> HWLAB API /v1/m3/io controlled M3 IO path with route/audit/evidence/blocker payloads and tests proving no direct gateway/box/patch-panel or OpenAI fallback hardware control.
Host commander review: merged PR #171 after diff review. Scope is user-visible Code Agent completion evidence and smoke guards that reject echo/mock/stub completions; live smoke is read-only aside from the minimal chat request and does not print reply text or secrets. No runtime mutation, no service restart, and no M3/M4/M5 acceptance claim.